Security context

Highlights

Denial of Service: 5 prior fixes. Scrutinize any change in this area.

src/session.rs: most-fixed (2 issues). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

Denial of Service: An integer subtraction underflow in the terminal reflow logic can trigger an out-of-bounds panic when resizing terminal panes, allowing a remote server to abruptly terminate the terminal session. Developers must use saturating arithmetic to prevent such crashes.

Denial of Service: Unbounded or zero-duration read and write operations on Unix streams can lead to infinite hangs or unexpected blocking behaviors during session teardowns. Enforcing minimum timeouts and strict deadlines is critical to prevent denial of service.

Denial of Service: The UNIX socket API is vulnerable to resource exhaustion and blocking exploits if connections are accepted without active connection polling, proper file permission boundaries, and hard read/write deadlines.